RocketChat / RocketChat/Rocket.Chat
Login impossible with umlauts im password via crowd integration
@theorenck is already working on this.
Since Nov 28, 2019.
- Dominant language
- TypeScript
- Stars
- 46.1k
- Forks
- 13.9k
- Avg merge
- 3d 3h
- Merged PRs (30d)
- 130
Description
Description:
Crowd integration fails with umlauts in password
Server Setup Information:
- Version of Rocket.Chat Server:
0.57.2 - Operating System:
Ubuntu 14.04, but i'm running the docker-container - Deployment Method(snap/docker/tar/etc):
docker - Number of Running Instances:
1 - DB Replicaset Oplog:
none, running on a single db (while evaluating) - Node Version:
what ever is shipped in the rocketchat/rocker.chat container
Steps to Reproduce:
- set up crowd integration
- have umlauts in your password
- try to log in
Expected behavior:
i would expect login to work with umlauts in the password
Actual behavior:
login is impossible with umlauts within the password.
it's surely this issue.
its reproduce able with all users, in many iterations.
change password to 7bit asci: works, change password to have umlauts: fail, change back to 7bit ascii: fail.
Relevant logs:
rocketchat_logger rocketchat_logger.js:377 CROWD ➔ info Init CROWD login $username
rocketchat_logger rocketchat_logger.js:377 CROWD ➔ info Going to crowd: $username
rocketchat_logger rocketchat_logger.js:377 CROWD ➔ error Crowd user not authenticated due to an error, falling back
rocketchat_logger rocketchat_logger.js:377 CROWD ➔ info Fallback to default account system { username: '$username' }
I know about the workaround "just don't have umlauts in your password", but our it security officers it telling out employees to have "strong" passwords ans actually encourage them to use all kind of chars within their passwords.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.